WebAuthn Ceremony Store (webauthn/WebAuthnCeremonyStore.java)

Stores short-lived state for WebAuthn ceremonies, supporting registration and authentication flows.

// Source: https://github.com/hoangsonww/Employee-Management-Fullstack-App | License: MIT | Copyright 2024-2026 Son Nguyen
// Provided via justclaw.it.com; keep this notice with the code.
package com.example.employeemanagement.webauthn;

import com.yubico.webauthn.AssertionRequest;
import com.yubico.webauthn.data.PublicKeyCredentialCreationOptions;
import java.time.Duration;
import java.time.Instant;
import java.util.Optional;
import java.util.UUID;
import java.util.concurrent.ConcurrentHashMap;
import org.springframework.stereotype.Component;

/**
 * Holds the short-lived, server-side state of in-flight WebAuthn ceremonies between their "start"
 * and "finish" requests.
 *
 * <p>Entries are single-use (consumed on retrieval) and expire after a configurable timeout, which
 * mitigates repl

... (truncated -- full source via MCP)